Privacy Policy

This Privacy Policy explains how Yinn Ecommerce LLC ("eCommerce Cracks", "we", "us") collects, uses, stores, protects and discloses information — including data accessed through the Amazon Ads API on behalf of our clients.

It applies to our website at ecommercecracks.com, to our advertising management and reporting services, and to any application we operate that interfaces with Amazon Advertising.

We are an approved member of the Amazon Ads Partner Network. Our handling of Amazon Advertising data is governed by this policy together with the Amazon Ads API License Agreement, the Amazon Ads Data Protection Policy, the Acceptable Use Policy and the Amazon Ads Partner Network Policies.

Who we are

eCommerce Cracks is a trading name of Yinn Ecommerce LLC. We provide Amazon advertising management, campaign optimization, auditing and reporting services to brands selling on Amazon.

• Legal entity: Yinn Ecommerce LLC
• Registered address: 30 N Gould St, Sheridan, WY, USA
• Website: ecommercecracks.com
• Data protection contact: info@ecommercecracks.com

Amazon Advertising data we access

When a client authorizes our application through Login with Amazon, we access only the data required to deliver the services they have engaged us for. This includes:

• Campaign structure — campaigns, ad groups, keywords, product targets, negative targets, budgets and bids.
• Performance data — impressions, clicks, spend, orders, sales, conversion and attribution metrics.
• Search term and targeting reports — customer search terms matched to campaigns, and their performance.
• Account and profile information — advertiser profile identifiers, marketplace, currency and account type.
• Billing and invoicing data — where required to reconcile advertising spend for reporting.

Why we access it

• To create, manage and optimize advertising campaigns on the client's behalf.
• To calculate break-even and target thresholds, adjust bids, and build harvest and negation lists.
• To produce audits, dashboards and performance reports for the client.
• To diagnose account issues and support the client's advertising strategy.

We request access only to data necessary for these functions. We do not request or retrieve data that is not required for the service we provide.

Authorization and account access

• We act on behalf of an advertiser only where that advertiser has granted us express, verifiable authorization through Amazon's third-party authorization flow or an equivalent permission granted within their own Amazon account.
• We never ask for, accept, collect, store or transmit an advertiser's Amazon login credentials, passwords or authentication credentials for any purpose.
• We do not share our own developer credentials, API keys or tokens with any third party.
• Authorization is renewed at least every 365 days. Where consent is not renewed, our access to that account and its data ends.
• A client may withdraw our access at any time from within their Amazon Advertising account, or by contacting us at info@ecommercecracks.com.

How we store and protect data

We maintain physical, administrative and technical safeguards designed to protect Amazon Advertising data against unauthorized access, loss, alteration or disclosure. These include:

• Encryption in transit. All data is transmitted over encrypted channels using HTTPS/TLS. Unencrypted channels are disabled.
• Access management. Every individual with access is assigned a unique account. We do not use shared, generic or default credentials. Access is reviewed at least quarterly and revoked when no longer required.
• Need-to-know restriction. Access to client advertising data is limited to personnel who require it to deliver the engaged service.
• Network protection. Systems holding advertising data are protected by access controls restricting connections to approved users.
• Device controls. Personnel are prohibited from storing Amazon Advertising data on personal devices.
• Account lockout. Anomalous access patterns and repeated failed log-in attempts trigger account suspension.

Retention and deletion

We retain Amazon Advertising data only as long as necessary to provide the agreed service. In the course of delivering audits and reporting, data is exported into working files, spreadsheets and report documents held in our secured systems.

• Working files and reports are retained for the duration of the client engagement and deleted when no longer required for the permitted purpose.
• On termination of a client engagement, we delete or return that client's advertising data on request.
• Where Amazon requires deletion or return of Amazon Information, we comply within 72 hours of the request, and permanently delete all live, network-accessible instances within 90 days, using industry-standard sanitization.
• Where we are legally required to retain specific data, we hold it securely, use it solely for that legal requirement, and delete it permanently once the requirement ends.

What we never do with your data

• We do not sell, license, sublicense, rent, lease, lend, assign or transfer Amazon Advertising data to any third party.
• We do not disclose data obtained on behalf of one advertiser to any other client, user or outside party, except where required by law.
• We do not publish Amazon Advertising data on public websites, search engines or public environments, and we do not commercially aggregate or otherwise monetize it beyond the service the client has engaged us for.
• We do not combine Amazon Advertising data with third-party data sources without express prior written approval from Amazon.
• We do not use Amazon Advertising data for interest-based advertising, behavioral retargeting or unauthorized interest-based messaging.
• We do not attempt to re-identify, reverse engineer or reconstruct data to identify or profile individuals.
• We do not calculate or publish insights about the health of Amazon's business.

Automated processing and AI

We use software automation and artificial intelligence tools to analyse advertising data and generate recommendations — for example bid calculations, search term classification, and drafting of report commentary.

• Bid and budget calculations are produced by deterministic, rule-based logic, not by generative models.
• Where AI is used for analysis or narrative summaries, output is reviewed by a human before any change is applied to a live campaign or any report is issued.
• Recommendations are based on data available at the time of retrieval. Amazon reporting is subject to attribution lag and restatement, so figures may change after publication. Reporting freshness is stated in each deliverable.
• We implement validation and error-handling checks on any automated processing that materially affects a client's campaigns.
• No automated decision producing legal or similarly significant effects on an individual is made using this data.

Other information we collect

Website visitors

Our website may collect standard technical information such as IP address, browser type, device information and pages visited, via cookies and similar technologies, to operate and improve the site.

Prospects and clients

Where you contact us, subscribe to our newsletter, or engage our services, we collect the contact and business details you provide — name, email address, company, and information relevant to the service requested — to respond to you, deliver the service, and send communications you have opted into. You may unsubscribe at any time.

Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to our processing of your personal information, to request portability, and to withdraw consent.

• EEA / UK (GDPR). You may exercise the rights above and lodge a complaint with your local supervisory authority. Our lawful bases are performance of a contract, legitimate interests, and consent where required.
• California (CCPA/CPRA). You may request disclosure of the categories and specific pieces of personal information collected, request deletion, and opt out of sale or sharing. We do not sell or share personal information. We will not discriminate against you for exercising these rights.

To exercise any right, contact info@ecommercecracks.com. We respond within the timeframe required by applicable law.

Sub-processors and international transfers

We use a limited number of vetted service providers — for example cloud hosting, storage and analytics — who process data on our behalf under written confidentiality and data protection obligations, and only to support the services we provide.

Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or an equivalent lawful transfer mechanism.

Changes to this policy

We may update this policy from time to time. The effective date at the top of this page reflects the most recent version. Material changes will be communicated to active clients directly.

Contact

• Privacy and data protection: info@ecommercecracks.com
• Security reports: info@ecommercecracks.com
• General enquiries: info@ecommercecracks.com
• Postal: Yinn Ecommerce LLC, 30 N Gould St, Sheridan, WY, USA